Home / Safety / Capture One for photography
Capture One A/S (Copenhagen, Denmark)How safe is Capture One for photography?
Capture One publishes limited privacy guarantees. Ask the provider for clarification before you put confidential photography data into it.
Where does Capture One stand in photography?
Shared place 8 of 29 options for photography (professional tools and general assistants) on GDPR profile. 9 options, like Capture One, have a limited profile. Each tile is an option we track for this field; click for the check.
Published safeguards
which language model is used is not public; the AI features are image models within the software. Whether AI processing runs locally or in the cloud is not stated on the price page. Danish company (EU), majority stake held by Axcel. Client data is stored in Microsoft Azure (Europe and US); a data processing agreement (DPA) comes with the licence, transfers outside the EEA via standard contractual clauses (according to the provider). ISO 27001 or SOC 2 not published.
How to use Capture One safely
- Use the business variant and sign a data processing agreement (DPA).
- Do not enter unnecessary personal data into prompts; anonymise where possible.
- Enable EU data residency where the provider offers it.
- Keep a professional in the loop: your photos show recognisable people, often clients and their guests: that is personal data, and as soon as a tool groups or recognises faces it becomes biometric data (art.
Stronger or equally strong in photography
Questions
- How safe is Capture One for photography?
- Capture One publishes limited privacy guarantees. Ask the provider for clarification before you put confidential photography data into it. Limited or partly unknown guarantees: ask the provider.
- Does Capture One train on my data?
- which language model is used is not public; the AI features are image models within the software. Whether AI processing runs locally or in the cloud is not stated on the price page. Danish company (EU), majority stake held by Axcel. Client data is stored in Microsoft Azure (Europe and US); a data processing agreement (DPA) comes with the licence, transfers outside the EEA via standard contractual clauses (according to the provider). ISO 27001 or SOC 2 not published.
- What should I watch out for with AI in photography?
- Your photos show recognisable people, often clients and their guests: that is personal data, and as soon as a tool groups or recognises faces, it becomes biometric data (Art. 9 GDPR). So check whether a tool works locally or uploads your photos. Aftershoot, Narrative and Excire select on your own computer; Excire works without the cloud. Neurapix processes in Göttingen on its own hardware and deletes images up to 48 hours after delivery. Watch out for training: Aftershoot states in its privacy statement that collected images and edits are used to train its models, Pixelz uses images for machine learning with the client's consent, and Pic-Time trains on a small share of images from photographers who sign up for this. Luminar Neo sends photos for advanced AI features to external AI partners, including outside the EEA. If you use facial recognition in client galleries, record that in your terms and sign a data processing agreement.
Source documents
Everything about Capture One Best AI for photography
Summarised by the editorial team from provider documentation · not legal advice
Last checked: 4 November 2026 · How we check
Source: , checked on 4 November 2026
Every Friday: what changed in AI for photography
New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.